Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
File: 0dvzH9k3nKtcUK_TkqLukFcYg18.mft (raw, json)
Hash identifier: 2Nhjckbp5CUwxbyvGhmJ/iJRiDayMhxWrqu6xLUh358=
Subject key identifier: AF:38:E3:5E:49:A3:FA:35:F5:C4:82:E2:3D:6D:5A:A2:5E:03:F3:D2
Authority key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
Certificate issuer: /CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Certificate serial: 01974EFC452B41CF53A996814C6CF47E9858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
Manifest number: 1095
Signing time: Sun 08 Jun 2025 10:00:44 +0000
Manifest this update: Sun 08 Jun 2025 10:00:44 +0000
Manifest next update: Mon 09 Jun 2025 10:00:44 +0000
Files and hashes: 1: 0dvzH9k3nKtcUK_TkqLukFcYg18.crl (hash: mb8TAczoUafWHEGbY9RIdzdz8J2/8EX0ZmFBtiRTY50=)
2: jM6ObOeKnGJ-XMKGH2l4W5ZCd2A.roa (hash: KTQ2TAHXzAzojs4IsYPpcpBSdUKcZYE1gqliIFvrHcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:45:2b:41:cf:53:a9:96:81:4c:6c:f4:7e:98:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Validity
Not Before: Jun 8 10:00:44 2025 GMT
Not After : Jun 9 10:00:44 2025 GMT
Subject: CN=af38e35e49a3fa35f5c482e23d6d5aa25e03f3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b5:62:4c:1d:84:6d:13:10:48:b8:85:89:61:
9b:dc:1f:07:53:53:77:55:ea:6e:a5:75:6d:45:32:
c4:79:34:4c:77:80:e9:aa:ea:f7:da:a0:f2:3b:18:
ae:b7:4e:10:c9:fb:37:ad:e5:e4:39:51:21:df:51:
3f:31:03:ab:ee:5e:a6:0b:7c:c4:29:72:65:43:35:
c4:b2:05:56:ea:fa:44:4b:5a:0e:0e:60:7f:b0:69:
a1:87:04:17:ef:ec:2b:61:b1:a4:7e:c5:48:7f:a7:
01:b9:47:59:ff:64:ed:88:e8:4c:c4:cf:25:31:fc:
20:ce:87:c7:53:b3:12:c2:6d:d5:4b:92:bc:9d:5c:
cc:fb:c5:e6:8f:49:25:48:2b:55:47:aa:a5:52:1e:
bf:06:91:8d:88:d0:8a:3a:a3:9c:d9:72:db:aa:6d:
94:49:24:f0:9e:3d:2e:21:b1:cd:18:bd:2f:34:0e:
78:a4:58:f2:84:9f:ea:26:45:b7:3f:50:88:c1:b7:
64:ba:73:bb:6c:76:c6:e2:7e:0b:06:06:38:bb:8e:
38:8a:7e:dd:0d:76:65:82:5d:a0:ed:4e:ba:52:9f:
96:d7:fb:ce:6c:f1:05:c9:11:c4:00:0a:06:49:88:
57:63:ec:d9:8f:b7:11:a2:26:32:e6:1d:6b:69:24:
72:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:38:E3:5E:49:A3:FA:35:F5:C4:82:E2:3D:6D:5A:A2:5E:03:F3:D2
X509v3 Authority Key Identifier:
keyid:D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:11:91:2d:28:13:b5:53:42:be:be:db:56:36:4e:aa:51:49:
5a:35:b9:dc:9a:29:0d:1a:4c:1c:dd:e5:73:14:17:f6:a4:97:
af:c8:20:88:e4:07:54:27:7c:a8:b6:89:68:f6:fa:78:3f:7d:
8a:ae:ab:5e:db:e2:33:49:88:db:61:7d:c1:44:39:c2:95:7b:
01:4a:90:ff:39:f5:fa:7f:27:50:8c:8b:8f:5c:4d:0f:db:b2:
0a:a5:93:08:77:7e:62:0c:3a:cf:91:6a:fb:d9:2b:51:0c:d8:
8f:12:68:c6:c2:55:91:44:cd:f9:12:c4:a5:f9:90:a8:17:b1:
59:76:70:cb:13:e0:10:18:68:2e:49:b4:c0:52:8f:9c:25:52:
e8:1c:d0:f4:00:c1:5c:59:ca:c4:b6:60:e5:51:d5:9a:fc:ef:
9a:a6:f1:c3:a3:8f:ff:c3:ec:bd:41:2c:e2:c5:a6:98:fb:64:
09:50:99:9d:b0:d0:9c:c7:fb:cc:dc:0c:3a:39:0c:cf:0b:33:
de:cc:6b:65:36:a4:cb:a3:4a:a2:af:5d:bc:71:39:a1:ed:4f:
17:42:e6:08:01:08:9b:cb:a9:79:61:5e:46:df:b3:65:07:f8:
ad:21:4c:48:e4:4e:1c:30:eb:8d:1f:82:26:d0:9c:6e:23:e3:
26:04:75:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:30:21 2025 by rpki-client